General
- Target 2026-08-12_f6c10a6dd5499c87d2f18d5ec2de379f_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260812-1kldeaverh
- SHA256 0d77e3264e2fa627ed0e0e7e3ede561d7f239c4f93411def397c7a42efd1d80e
- MD5 f6c10a6dd5499c87d2f18d5ec2de379f
- SHA1 9b324ba332f38cafe562e7faa34c188b28bb7022
- SHA512 480196f3f32bfcd9e0fb3bd660c06d9fe02ab806b244506cb61e11026b34d179c2fcfc37174d39c565aa0b2c6ac57d86b45629357cda3b10759e15d5cb3a0833
- SSDEEP 6144:gFlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzF:XfBQGH6SfuoAX+U41
- TLSH T1A95402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_f6c10a6dd5499c87d2f18d5ec2de379f_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_f6c10a6dd5499c87d2f18d5ec2de379f_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 0d77e3264e2fa627ed0e0e7e3ede561d7f239c4f93411def397c7a42efd1d80e
- MD5 f6c10a6dd5499c87d2f18d5ec2de379f
- SHA1 9b324ba332f38cafe562e7faa34c188b28bb7022
- SHA512 480196f3f32bfcd9e0fb3bd660c06d9fe02ab806b244506cb61e11026b34d179c2fcfc37174d39c565aa0b2c6ac57d86b45629357cda3b10759e15d5cb3a0833
- SSDEEP 6144:gFlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzF:XfBQGH6SfuoAX+U41
- TLSH T1A95402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.